Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/323830343a323133383a3a2f33322d3333203d3e20323634353433.roa
File:                     323830343a323133383a3a2f33322d3333203d3e20323634353433.roa (raw, json)
Hash identifier:          GaXRVmtc9GYkFBI5EwdutZcVTpb148sgylfWx7e+euc=
Subject key identifier:   C8:E6:C8:43:75:FB:A4:9B:FC:7A:B2:A3:D5:DC:44:49:1D:3F:5E:FD
Certificate issuer:       /CN=0937B5D7436A37FA6239657EB9161F1F8F7565AE
Certificate serial:       2701C9AB79C48C8F510615D5592D96AD0F0956CE
Authority key identifier: 09:37:B5:D7:43:6A:37:FA:62:39:65:7E:B9:16:1F:1F:8F:75:65:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0937B5D7436A37FA6239657EB9161F1F8F7565AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/323830343a323133383a3a2f33322d3333203d3e20323634353433.roa
Signing time:             Thu 31 Jul 2025 14:56:50 +0000
ROA not before:           Thu 31 Jul 2025 14:51:50 +0000
ROA not after:            Thu 30 Jul 2026 14:56:50 +0000
asID:                     264543
IP address blocks:        2804:2138::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/0937B5D7436A37FA6239657EB9161F1F8F7565AE.crl
                          rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/0937B5D7436A37FA6239657EB9161F1F8F7565AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0937B5D7436A37FA6239657EB9161F1F8F7565AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 13:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:01:c9:ab:79:c4:8c:8f:51:06:15:d5:59:2d:96:ad:0f:09:56:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0937B5D7436A37FA6239657EB9161F1F8F7565AE
        Validity
            Not Before: Jul 31 14:51:50 2025 GMT
            Not After : Jul 30 14:56:50 2026 GMT
        Subject: CN=C8E6C84375FBA49BFC7AB2A3D5DC44491D3F5EFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e3:a6:c7:fc:d3:fb:30:4d:1e:f4:fd:9d:2c:
                    ab:dc:98:a7:9b:f9:b7:6c:1f:e0:72:05:93:49:3d:
                    50:4b:88:12:29:ad:b2:79:2d:47:38:1b:be:32:0f:
                    98:b1:a8:9a:c8:66:ee:43:98:d9:ee:8d:5d:42:f7:
                    c7:e6:51:81:ec:4d:63:58:83:c7:7c:fb:94:f3:17:
                    c2:4d:03:3e:07:29:04:69:d3:34:60:46:57:37:56:
                    08:40:fc:3d:d9:60:6c:4b:f9:26:56:17:6c:ee:a1:
                    da:c1:e4:3a:26:5d:68:33:e2:d8:9f:27:98:e1:b4:
                    62:51:25:84:5b:0a:16:89:e1:5c:3f:a2:9b:d6:c0:
                    83:99:17:60:1d:4b:e7:14:69:b3:0d:53:91:31:40:
                    ab:e9:57:ae:04:16:25:96:64:5c:8e:f8:ef:40:81:
                    ee:1a:ec:4f:57:9f:ac:4e:d2:b6:54:35:4e:72:30:
                    23:4b:47:c3:b8:8b:81:44:95:1e:27:68:38:d8:29:
                    19:1a:c5:05:9f:d1:df:2d:eb:d3:bd:ec:1d:de:8e:
                    de:1d:ab:0d:69:3d:7d:05:b9:f0:15:11:34:b2:a1:
                    67:83:0d:d7:8c:01:b3:5c:79:d9:f7:f5:ce:59:27:
                    2b:a7:41:32:38:36:2a:62:16:79:c6:df:96:f6:40:
                    47:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E6:C8:43:75:FB:A4:9B:FC:7A:B2:A3:D5:DC:44:49:1D:3F:5E:FD
            X509v3 Authority Key Identifier:
                keyid:09:37:B5:D7:43:6A:37:FA:62:39:65:7E:B9:16:1F:1F:8F:75:65:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/0937B5D7436A37FA6239657EB9161F1F8F7565AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0937B5D7436A37FA6239657EB9161F1F8F7565AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/323830343a323133383a3a2f33322d3333203d3e20323634353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2138::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:20:ef:4d:41:fc:d5:a2:a7:b4:da:9e:01:7e:93:42:56:51:
         97:26:7c:86:5b:db:3a:70:84:ea:32:82:17:4d:95:1d:40:b8:
         bf:0d:1c:bb:4a:71:37:41:0b:4b:80:78:3e:3d:2b:fe:61:35:
         52:e5:0c:8a:43:7b:3d:87:72:a2:59:20:de:b9:43:1c:c0:30:
         0c:29:29:ee:70:a3:88:98:b0:fd:33:ad:49:1a:c0:0e:7b:b1:
         6a:96:f4:0c:84:42:98:84:1a:d2:95:7e:2b:c5:f0:c6:8a:02:
         ad:9d:ce:34:90:72:79:fb:1c:6f:13:cc:9b:d5:09:a6:61:d4:
         d5:92:70:25:00:e3:d6:ad:4c:1d:18:f1:84:f2:d8:41:3f:18:
         7d:47:1d:62:bc:4f:37:30:21:c2:ee:39:78:c3:69:16:fb:ae:
         e3:29:e1:00:bd:08:47:68:39:7d:81:9f:d0:b3:d4:15:fd:5d:
         e7:c1:5d:58:a7:77:9e:4f:e7:9c:d2:9c:2c:8d:3d:9c:5a:c2:
         91:c5:f8:34:a1:52:29:5b:e9:ed:62:b0:24:d6:13:6c:26:87:
         0a:6f:8e:ed:71:a2:e0:0d:da:03:0f:8b:a2:67:28:ee:a2:1c:
         08:65:25:47:95:ac:3b:3c:cb:22:4d:e0:68:0a:52:ff:24:ce:
         05:49:01:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:21:10 2025 by rpki-client